Miroslav Stampar
|
4b2ff4339a
|
Fixes #1243
|
2015-05-07 12:36:23 +02:00 |
|
Miroslav Stampar
|
18e62fd507
|
Fix for an Issue #1240
|
2015-05-05 14:36:21 +02:00 |
|
Miroslav Stampar
|
84ba3d45c1
|
Patch for an Issue #1238
|
2015-05-04 21:47:10 +02:00 |
|
Miroslav Stampar
|
5ee7fd785a
|
Fixes #1235
|
2015-05-01 00:48:08 +02:00 |
|
Miroslav Stampar
|
03f32ae2b6
|
Merge of an Issue #1227
|
2015-04-22 17:21:55 +02:00 |
|
Miroslav Stampar
|
a94dcf94e9
|
Patch for an Issue #1226đ
|
2015-04-22 16:41:20 +02:00 |
|
Miroslav Stampar
|
bb98894dc1
|
Adding option --safe-req
|
2015-04-22 16:28:54 +02:00 |
|
Miroslav Stampar
|
4ded9a9966
|
Small patch for existing option validation
|
2015-04-22 15:32:14 +02:00 |
|
Miroslav Stampar
|
77c96de4ea
|
Minor patch related to the last commit
|
2015-04-22 10:33:22 +02:00 |
|
Miroslav Stampar
|
95b52a02ec
|
Minor patch for custom injection into HTTP Authorization header
|
2015-04-22 10:28:16 +02:00 |
|
Miroslav Stampar
|
c5138d4696
|
Minor refactoring
|
2015-04-21 00:02:47 +02:00 |
|
Miroslav Stampar
|
349dfbf2ae
|
Adding an option --safe-post
|
2015-04-20 23:55:59 +02:00 |
|
Miroslav Stampar
|
7517db76d1
|
Minor fix for SQLite's schema parsing
|
2015-04-16 18:40:43 +02:00 |
|
Miroslav Stampar
|
dbfa8f1cfc
|
Fix for a bug reported by the user (conf.scheme/conf.hostname/conf.port were None in multiple targets mode)
|
2015-04-14 11:05:17 +02:00 |
|
Miroslav Stampar
|
0e4800f73c
|
Changing default answer for sitemap checking to N
|
2015-04-14 09:30:01 +02:00 |
|
Miroslav Stampar
|
1e7f2d6da2
|
Implements #1215
|
2015-04-06 22:07:22 +02:00 |
|
Miroslav Stampar
|
c35fa63a48
|
Fixes #1212
|
2015-03-30 11:58:09 +02:00 |
|
Miroslav Stampar
|
99c1cc9937
|
Fixes #1208
|
2015-03-26 17:17:46 +01:00 |
|
Miroslav Stampar
|
a19bccc84f
|
Fixes #1205
|
2015-03-26 15:31:29 +01:00 |
|
Miroslav Stampar
|
770cfb6102
|
Removing test print
|
2015-03-26 15:20:54 +01:00 |
|
Miroslav Stampar
|
fc0186e029
|
Minor update
|
2015-03-26 12:39:44 +01:00 |
|
Miroslav Stampar
|
5dfd3ef1e4
|
Another update
|
2015-03-26 12:25:32 +01:00 |
|
Miroslav Stampar
|
3be7a447a5
|
Update
|
2015-03-26 12:22:49 +01:00 |
|
Miroslav Stampar
|
7587528ebd
|
Fixes #1202
|
2015-03-26 11:40:19 +01:00 |
|
Miroslav Stampar
|
05a496c275
|
Fixes #1196
|
2015-03-20 00:56:52 +01:00 |
|
Miroslav Stampar
|
25b23750e8
|
Bug fix for crawling over non-80 port
|
2015-03-12 11:49:52 +01:00 |
|
Miroslav Stampar
|
adc8ac267d
|
Fixes #1190
|
2015-03-10 09:23:26 +01:00 |
|
Miroslav Stampar
|
9bd41ed99d
|
Fixes #1189
|
2015-03-09 22:02:20 +01:00 |
|
Christ van Willegen
|
80fb2e29cc
|
Fix some spelling errors in help texts (through -> thorough)
|
2015-03-04 13:31:29 +01:00 |
|
Miroslav Stampar
|
3347fc25ca
|
Fixes #1185
|
2015-03-03 15:10:06 +01:00 |
|
Miroslav Stampar
|
3f6c3b40dd
|
Minor update (not overriding user given 'Accept-Encoding' header value)
|
2015-03-03 14:37:36 +01:00 |
|
Bernardo Damele
|
8281fe48e5
|
bug fix: test for boundaries with high levels if the test was extended
|
2015-03-01 11:02:05 +00:00 |
|
Bernardo Damele
|
260643241a
|
prioritized fingerprinted DBMS to error-based and user provided one
|
2015-02-27 14:19:30 +00:00 |
|
Bernardo Damele
|
2f08c8b666
|
bug fix: do not skil heuristic check if previous page (test for dynamicity) had DBMS message. Code cleanup
|
2015-02-27 13:57:28 +00:00 |
|
Miroslav Stampar
|
dde400ab8f
|
More suitable version of 6bcc95a (suggested by user)
|
2015-02-25 10:19:51 +01:00 |
|
Miroslav Stampar
|
6bcc95a20d
|
Restricting evaluated code variable names to Python valid characters ([_0-9a-zA-Z])
|
2015-02-24 15:05:44 +01:00 |
|
Miroslav Stampar
|
e35c7fbb7a
|
Fixes #1172
|
2015-02-22 13:41:54 +01:00 |
|
Bernardo Damele
|
475cc8b24b
|
trivial code cleanup
|
2015-02-21 13:12:30 +00:00 |
|
Bernardo Damele
|
383929c0c2
|
if the user forces the DBMS, then sort the tests accordingly to perform first the DBMS-specific tests, then the others
|
2015-02-21 13:12:03 +00:00 |
|
Bernardo Damele
|
d235ee375b
|
code cleanup
|
2015-02-21 12:59:44 +00:00 |
|
Bernardo Damele
|
8be24d3e9b
|
minor enhancement, prefer intersect() each time DBMS values are comfronted
|
2015-02-21 12:59:27 +00:00 |
|
Bernardo Damele
|
388c0dfd77
|
trivial layout fix
|
2015-02-21 12:57:49 +00:00 |
|
Bernardo Damele
|
52dd92748a
|
rework some of the logic of the detection phase based on identified DBMS along the way
|
2015-02-21 02:23:42 +00:00 |
|
Bernardo Damele
|
4f939b5719
|
avoid false positive message when extensive heuristic check is performed following detection of boolean blind injection detection: do only heuristic DBMS fingerprint for DBMS specific tables
|
2015-02-20 18:36:34 +00:00 |
|
Bernardo Damele
|
1ecb921ba7
|
Consistency in enums
|
2015-02-20 18:31:47 +00:00 |
|
Bernardo Damele
|
214b9360e9
|
Minor fix to check for inline query payloads regardless of previously identified payloads and code cleanup
|
2015-02-20 18:30:42 +00:00 |
|
Bernardo Damele
|
79d4d970a5
|
trivial code cleanup
|
2015-02-20 15:42:28 +00:00 |
|
Bernardo Damele
|
201b605f9b
|
Minor fix and consistency: do not ask to include all tests if level and risk are at the max settings already
|
2015-02-20 10:21:44 +00:00 |
|
Bernardo Damele
|
daa8e0d8c5
|
minor fix
|
2015-02-18 10:13:28 +00:00 |
|
Miroslav Stampar
|
1636088b75
|
Minor update
|
2015-02-16 11:48:53 +01:00 |
|